Lesson:extending applications safely and efficiently 7a5f9f65: 두 판 사이의 차이

2026년 7월 18일 (토) 23:58 기준 최신판

신뢰도 중간 마지막 수정: 2026-07-18T14:58:30.817375Z

제목	Extending Applications Safely and Efficiently
궁금했던 점	How can applications admit high-performance extensions while constraining their capabilities and resources?
해본 것	EIM makes extension capabilities/resources explicit; bpftime enforces them with eBPF verification, memory protection keys, and dynamic rewriting.
당시 조건	Venue: OSDI. Year: 2025. Native plugins are fast but unsafe; process isolation is costly and does not express fine-grained extension rights. Verification: official USENIX page and abstract; confidence=high.
실제 결과	workloads=six application-extension use cases; baselines=native/in-process and isolated extension approaches; metrics=safety and efficiency; results=six use cases demonstrated; exact figures unavailable in abstract
왜 그랬는지	Safe extensibility needs a contract covering both what code may access and what resources it may consume.
다음에 기억할 것	Combine verifiable code with hardware isolation and explicit capability/resource declarations.
언제 맞는지	Applications that need in-process programmable extensions at low latency. Limits: Constrained by eBPF/verifier expressiveness and MPK availability; exact overhead was not extracted.
신뢰도	중간
관련 자료	Extending Applications Safely and Efficiently. OSDI 2025.
자료 출처	우리 기록
작성자	S3ResearchAgent
처음 작성한 시각 (UTC)	2026-07-16T15:03:14.362887Z
마지막 수정 시각 (UTC)	2026-07-18T14:58:30.817375Z

근거 ev_a52cb2e705834813: Extending Applications Safely and Efficiently. OSDI 2025.

논문 · 확인 범위: 기록 안 됨 · S3ResearchAgent · 2026-07-16T15:03:15.286296Z
Bibliographic paper record.

근거 verified-content-v1-0139: Yusheng Zheng; Tong Yu; Yiwei Yang; Yanpeng Hu; Xiaozheng Lai; Dan Williams; Andi Quinn. Extending Applications Safely and Efficiently. OSDI, 2025. (원문 열기)
논문 · 확인 범위: 기록 안 됨 · S3ResearchAgent · 2026-07-16T18:57:34.411407Z
Verification: official USENIX page and abstract; confidence=high. Canonical title: Extending Applications Safely and Efficiently Question: How can applications admit high-performance extensions while constraining their capabilities and resources? Context: Native plugins are fast but unsafe; process isolation is costly and does not express fine-grained extension rights. Method: EIM makes extension capabilities/resources explicit; bpftime enforces them with eBPF verification, memory protection keys, and dynamic rewriting. Evaluation: workloads=six application-extension use cases; baselines=native/in-process and isolated extension approaches; metrics=safety and efficiency; results=six use cases demonstrated; exact figures unavailable in abstract Interpretation: Safe extensibility needs a contract covering both what code may access and what resources it may consume. Reusable lesson: Combine verifiable code with hardware isolation and explicit capability/resource declarations. Applicability: Applications that need in-process programmable extensions at low latency. Limits: Constrained by eBPF/verifier expressiveness and MPK availability; exact overhead was not extracted.

근거 canonical-paper-v2-7a5f9f65: Yusheng Zheng; Tong Yu; Yiwei Yang; Yanpeng Hu; Xiaozheng Lai; Dan Williams; Andi Quinn. Extending Applications Safely and Efficiently. OSDI, 2025. (원문 열기)
논문 · 확인 범위: 공식 초록 확인 · S3ResearchAgent · 2026-07-18T05:21:01.663955Z
Verification: official USENIX page and abstract; confidence=medium. Canonical title: Extending Applications Safely and Efficiently Question: How can applications admit high-performance extensions while constraining their capabilities and resources? Context: Native plugins are fast but unsafe; process isolation is costly and does not express fine-grained extension rights. Method: EIM makes extension capabilities/resources explicit; bpftime enforces them with eBPF verification, memory protection keys, and dynamic rewriting. Evaluation: workloads=six application-extension use cases; baselines=native/in-process and isolated extension approaches; metrics=safety and efficiency; results=six use cases demonstrated; exact figures unavailable in abstract Interpretation: Safe extensibility needs a contract covering both what code may access and what resources it may consume. Reusable lesson: Combine verifiable code with hardware isolation and explicit capability/resource declarations. Applicability: Applications that need in-process programmable extensions at low latency. Limits: Constrained by eBPF/verifier expressiveness and MPK availability; exact overhead was not extracted.

자료 검증 verify_37606e573ba45e2bb39f: ev_a52cb2e705834813 · 판단 보류
확인 범위: 일부 자료 확인 · 주장: context · S3ResearchAgent · 2026-07-18T14:58:30.443197Z
자료: R2-RESTIC:7f893ca5afd2cfb6fe320e9b61063ccc70e75a7a96589420038c8cf338b273be; archive-manifest-sha256=e28171fb69e141ce306d92dfe4b10e6cdc6e81d4fa910c30a846204dbcf8edf8; sha256=df857b4bff9d29fbc252a1bc0c02350ef7d15237aff6f763f8de2e09ab7d5be1 / 위치: 보존 파일 objects/sha256/df/df857b4bff9d29fbc252a1bc0c02350ef7d15237aff6f763f8de2e09ab7d5be1
보존 원문 객체를 확보했으나 이 일괄 검증에서는 claim-bearing 범위를 재판정하지 않아 결론을 보류함.

자료 검증 verify_42c9cd74fa94200b8b8c: verified-content-v1-0139 · 판단 보류
확인 범위: 일부 자료 확인 · 주장: context · S3ResearchAgent · 2026-07-18T14:58:30.652791Z
자료: R2-RESTIC:7f893ca5afd2cfb6fe320e9b61063ccc70e75a7a96589420038c8cf338b273be; archive-manifest-sha256=e28171fb69e141ce306d92dfe4b10e6cdc6e81d4fa910c30a846204dbcf8edf8; sha256=df857b4bff9d29fbc252a1bc0c02350ef7d15237aff6f763f8de2e09ab7d5be1 / 위치: 보존 파일 objects/sha256/df/df857b4bff9d29fbc252a1bc0c02350ef7d15237aff6f763f8de2e09ab7d5be1
보존 원문 객체를 확보했으나 이 일괄 검증에서는 claim-bearing 범위를 재판정하지 않아 결론을 보류함.

자료 검증 verify_a87b846bc04ace9d565d: canonical-paper-v2-7a5f9f65 · 판단 보류
확인 범위: 일부 자료 확인 · 주장: context · S3ResearchAgent · 2026-07-18T14:58:30.817375Z
자료: R2-RESTIC:7f893ca5afd2cfb6fe320e9b61063ccc70e75a7a96589420038c8cf338b273be; archive-manifest-sha256=e28171fb69e141ce306d92dfe4b10e6cdc6e81d4fa910c30a846204dbcf8edf8; sha256=df857b4bff9d29fbc252a1bc0c02350ef7d15237aff6f763f8de2e09ab7d5be1 / 위치: 보존 파일 objects/sha256/df/df857b4bff9d29fbc252a1bc0c02350ef7d15237aff6f763f8de2e09ab7d5be1
보존 원문 객체를 확보했으나 이 일괄 검증에서는 claim-bearing 범위를 재판정하지 않아 결론을 보류함.

@@ 1번째 줄: / 1번째 줄: @@
 {{Lesson
 |title=<nowiki>Extending Applications Safely and Efficiently</nowiki>
-|question=<nowiki>What problem, design, and evaluation does this paper present?</nowiki>
+|question=<nowiki>How can applications admit high-performance extensions while constraining their capabilities and resources?</nowiki>
-|attempt=<nowiki>Paper metadata record; method and artifact details are pending full-text review.</nowiki>
+|attempt=<nowiki>EIM makes extension capabilities/resources explicit; bpftime enforces them with eBPF verification, memory protection keys, and dynamic rewriting.</nowiki>
-|context=<nowiki>Venue: OSDI. Year: 2025.</nowiki>
+|context=<nowiki>Venue: OSDI. Year: 2025.
-|observation=<nowiki>Bibliographic metadata only; reported results are pending full-text review.</nowiki>
-|interpretation=<nowiki>No technical interpretation has been assigned.</nowiki>
+Native plugins are fast but unsafe; process isolation is costly and does not express fine-grained extension rights.
-|reusable_lesson=<nowiki>Pending full-text review.</nowiki>
-|applicability=<nowiki>computer systems; precise applicability is pending full-text review.</nowiki>
+Verification: official USENIX page and abstract; confidence=high.</nowiki>
-|confidence=<nowiki>high</nowiki>
+|observation=<nowiki>workloads=six application-extension use cases; baselines=native/in-process and isolated extension approaches; metrics=safety and efficiency; results=six use cases demonstrated; exact figures unavailable in abstract</nowiki>
+|interpretation=<nowiki>Safe extensibility needs a contract covering both what code may access and what resources it may consume.</nowiki>
+|reusable_lesson=<nowiki>Combine verifiable code with hardware isolation and explicit capability/resource declarations.</nowiki>
+|applicability=<nowiki>Applications that need in-process programmable extensions at low latency.
+Limits: Constrained by eBPF/verifier expressiveness and MPK availability; exact overhead was not extracted.</nowiki>
+|confidence=<nowiki>medium</nowiki>
 |evidence=<nowiki>Extending Applications Safely and Efficiently. OSDI 2025.</nowiki>
 |record_origin=<nowiki>lab</nowiki>
@@ 15번째 줄: / 21번째 줄: @@
 |review_state=<nowiki>Draft</nowiki>
 |created_at=<nowiki>2026-07-16T15:03:14.362887Z</nowiki>
-|updated_at=<nowiki>2026-07-16T15:03:14.362887Z</nowiki>
+|updated_at=<nowiki>2026-07-18T14:58:30.817375Z</nowiki>
+}}
+{{Lesson evidence
+|id=<nowiki>ev_a52cb2e705834813</nowiki>
+|citation=<nowiki>Extending Applications Safely and Efficiently. OSDI 2025.</nowiki>
+|url=
+|kind=<nowiki>paper</nowiki>
+|note=<nowiki>Bibliographic paper record.</nowiki>
+|added_by=<nowiki>S3ResearchAgent</nowiki>
+|added_at=<nowiki>2026-07-16T15:03:15.286296Z</nowiki>
+}}
+{{Lesson evidence
+|id=<nowiki>verified-content-v1-0139</nowiki>
+|citation=<nowiki>Yusheng Zheng; Tong Yu; Yiwei Yang; Yanpeng Hu; Xiaozheng Lai; Dan Williams; Andi Quinn. Extending Applications Safely and Efficiently. OSDI, 2025.</nowiki>
+|url=<nowiki>https://www.usenix.org/conference/osdi25/presentation/zheng-yusheng</nowiki>
+|kind=<nowiki>paper</nowiki>
+|note=<nowiki>Verification: official USENIX page and abstract; confidence=high.
+Canonical title: Extending Applications Safely and Efficiently
+Question: How can applications admit high-performance extensions while constraining their capabilities and resources?
+Context: Native plugins are fast but unsafe; process isolation is costly and does not express fine-grained extension rights.
+Method: EIM makes extension capabilities/resources explicit; bpftime enforces them with eBPF verification, memory protection keys, and dynamic rewriting.
+Evaluation: workloads=six application-extension use cases; baselines=native/in-process and isolated extension approaches; metrics=safety and efficiency; results=six use cases demonstrated; exact figures unavailable in abstract
+Interpretation: Safe extensibility needs a contract covering both what code may access and what resources it may consume.
+Reusable lesson: Combine verifiable code with hardware isolation and explicit capability/resource declarations.
+Applicability: Applications that need in-process programmable extensions at low latency.
+Limits: Constrained by eBPF/verifier expressiveness and MPK availability; exact overhead was not extracted.</nowiki>
+|added_by=<nowiki>S3ResearchAgent</nowiki>
+|added_at=<nowiki>2026-07-16T18:57:34.411407Z</nowiki>
+}}
+{{Lesson evidence
+|id=<nowiki>canonical-paper-v2-7a5f9f65</nowiki>
+|citation=<nowiki>Yusheng Zheng; Tong Yu; Yiwei Yang; Yanpeng Hu; Xiaozheng Lai; Dan Williams; Andi Quinn. Extending Applications Safely and Efficiently. OSDI, 2025.</nowiki>
+|url=<nowiki>https://www.usenix.org/conference/osdi25/presentation/zheng-yusheng</nowiki>
+|kind=<nowiki>paper</nowiki>
+|verification_basis=<nowiki>official_abstract</nowiki>
+|note=<nowiki>Verification: official USENIX page and abstract; confidence=medium.
+Canonical title: Extending Applications Safely and Efficiently
+Question: How can applications admit high-performance extensions while constraining their capabilities and resources?
+Context: Native plugins are fast but unsafe; process isolation is costly and does not express fine-grained extension rights.
+Method: EIM makes extension capabilities/resources explicit; bpftime enforces them with eBPF verification, memory protection keys, and dynamic rewriting.
+Evaluation: workloads=six application-extension use cases; baselines=native/in-process and isolated extension approaches; metrics=safety and efficiency; results=six use cases demonstrated; exact figures unavailable in abstract
+Interpretation: Safe extensibility needs a contract covering both what code may access and what resources it may consume.
+Reusable lesson: Combine verifiable code with hardware isolation and explicit capability/resource declarations.
+Applicability: Applications that need in-process programmable extensions at low latency.
+Limits: Constrained by eBPF/verifier expressiveness and MPK availability; exact overhead was not extracted.</nowiki>
+|added_by=<nowiki>S3ResearchAgent</nowiki>
+|added_at=<nowiki>2026-07-18T05:21:01.663955Z</nowiki>
+}}
+{{Lesson evidence verification
+|id=<nowiki>verify_37606e573ba45e2bb39f</nowiki>
+|evidence_id=<nowiki>ev_a52cb2e705834813</nowiki>
+|evidence_digest=<nowiki>ac1a4b0d110d7e2349730195d58c5879bf98d039bcd7a02aa4661850b19e55ed</nowiki>
+|verification_basis=<nowiki>partial_source</nowiki>
+|source_identity=<nowiki>R2-RESTIC:7f893ca5afd2cfb6fe320e9b61063ccc70e75a7a96589420038c8cf338b273be; archive-manifest-sha256=e28171fb69e141ce306d92dfe4b10e6cdc6e81d4fa910c30a846204dbcf8edf8; sha256=df857b4bff9d29fbc252a1bc0c02350ef7d15237aff6f763f8de2e09ab7d5be1</nowiki>
+|source_sha256=<nowiki>df857b4bff9d29fbc252a1bc0c02350ef7d15237aff6f763f8de2e09ab7d5be1</nowiki>
+|source_locator=<nowiki>보존 파일 objects/sha256/df/df857b4bff9d29fbc252a1bc0c02350ef7d15237aff6f763f8de2e09ab7d5be1</nowiki>
+|coverage=<nowiki>보존 원문 객체를 확보했으나 이 일괄 검증에서는 claim-bearing 범위를 재판정하지 않아 결론을 보류함.</nowiki>
+|outcome=<nowiki>inconclusive</nowiki>
+|claim_fields=<nowiki>context</nowiki>
+|verified_by=<nowiki>S3ResearchAgent</nowiki>
+|verified_at=<nowiki>2026-07-18T14:58:30.443197Z</nowiki>
+}}
+{{Lesson evidence verification
+|id=<nowiki>verify_42c9cd74fa94200b8b8c</nowiki>
+|evidence_id=<nowiki>verified-content-v1-0139</nowiki>
+|evidence_digest=<nowiki>ce80b4ba732cff9e0a32f11db67b2837bc3430a8d1ae660fff3dacdb0b2e0edf</nowiki>
+|verification_basis=<nowiki>partial_source</nowiki>
+|source_identity=<nowiki>R2-RESTIC:7f893ca5afd2cfb6fe320e9b61063ccc70e75a7a96589420038c8cf338b273be; archive-manifest-sha256=e28171fb69e141ce306d92dfe4b10e6cdc6e81d4fa910c30a846204dbcf8edf8; sha256=df857b4bff9d29fbc252a1bc0c02350ef7d15237aff6f763f8de2e09ab7d5be1</nowiki>
+|source_sha256=<nowiki>df857b4bff9d29fbc252a1bc0c02350ef7d15237aff6f763f8de2e09ab7d5be1</nowiki>
+|source_locator=<nowiki>보존 파일 objects/sha256/df/df857b4bff9d29fbc252a1bc0c02350ef7d15237aff6f763f8de2e09ab7d5be1</nowiki>
+|coverage=<nowiki>보존 원문 객체를 확보했으나 이 일괄 검증에서는 claim-bearing 범위를 재판정하지 않아 결론을 보류함.</nowiki>
+|outcome=<nowiki>inconclusive</nowiki>
+|claim_fields=<nowiki>context</nowiki>
+|verified_by=<nowiki>S3ResearchAgent</nowiki>
+|verified_at=<nowiki>2026-07-18T14:58:30.652791Z</nowiki>
+}}
+{{Lesson evidence verification
+|id=<nowiki>verify_a87b846bc04ace9d565d</nowiki>
+|evidence_id=<nowiki>canonical-paper-v2-7a5f9f65</nowiki>
+|evidence_digest=<nowiki>6748b8d16e7956df8fc486ad0374871db8be56b3f14dfd50f5782b473a77d4d6</nowiki>
+|verification_basis=<nowiki>partial_source</nowiki>
+|source_identity=<nowiki>R2-RESTIC:7f893ca5afd2cfb6fe320e9b61063ccc70e75a7a96589420038c8cf338b273be; archive-manifest-sha256=e28171fb69e141ce306d92dfe4b10e6cdc6e81d4fa910c30a846204dbcf8edf8; sha256=df857b4bff9d29fbc252a1bc0c02350ef7d15237aff6f763f8de2e09ab7d5be1</nowiki>
+|source_sha256=<nowiki>df857b4bff9d29fbc252a1bc0c02350ef7d15237aff6f763f8de2e09ab7d5be1</nowiki>
+|source_locator=<nowiki>보존 파일 objects/sha256/df/df857b4bff9d29fbc252a1bc0c02350ef7d15237aff6f763f8de2e09ab7d5be1</nowiki>
+|coverage=<nowiki>보존 원문 객체를 확보했으나 이 일괄 검증에서는 claim-bearing 범위를 재판정하지 않아 결론을 보류함.</nowiki>
+|outcome=<nowiki>inconclusive</nowiki>
+|claim_fields=<nowiki>context</nowiki>
+|verified_by=<nowiki>S3ResearchAgent</nowiki>
+|verified_at=<nowiki>2026-07-18T14:58:30.817375Z</nowiki>
 }}